Wireshark · Wireshark-dev: Re: [Wireshark-dev] Decompress Data

[Marcel Haas <inf462@xxxxxxxxxxx>]

On Fri, 7 Oct 2011 09:34:53 -0600, Stephen Fisher 
<steve@xxxxxxxxxxxxxxxxxx> wrote:
> On Fri, Oct 07, 2011 at 11:31:24AM +0200, Marcel Haas wrote:
>
> >  I have some packets witch are compress witz zlib.
> >  I want to uncompress them.
>
> Take a look at the tvb_uncompress() or tvb_child_uncompress() 
> functions
> in epan/tvbuff.c.  An example of tvb_child_uncompress() is in the 
> HTTP
> dissector, epan/dissectors/packet-http.c.
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
 hmm okay it seems to do the right way if i make it like that

                next_tvb =tvb_new_subset(tvb,offset2,-1,-1);
                
compress_tvb=tvb_uncompress(next_tvb,0,tvb_length(next_tvb));
                add_new_data_source(pinfo,compress_tvb,"Decompressed 
TVB");